Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
File:                     F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json)
Hash identifier:          nyC1MWFBvgJ1dz55/FrueEO/3yu4WRFDze30WgnNnWQ=
Subject key identifier:   99:C6:8F:97:8B:7A:FA:A7:17:DE:AE:6F:C4:7A:59:96:F0:6D:72:B1
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Certificate issuer:       /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial:       019F8FEC1360004EF10F3BBEDAB6D3F92B71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
Manifest number:          10D3
Signing time:             Thu 23 Jul 2026 17:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:40 +0000
Files and hashes:         1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: yGGMM/74A++DN0E+bv7Cci/OHMWEJHpKGkXeIN+M1QY=)
                          2: J0EuWLSb3B_xwNJGfbHeQ2JEG5w.roa (hash: MlQZGeS1jAVBfO3R8nnm0N8oigQzbZ43khot/CP8lDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:13:60:00:4e:f1:0f:3b:be:da:b6:d3:f9:2b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
        Validity
            Not Before: Jul 23 17:00:40 2026 GMT
            Not After : Jul 24 17:00:40 2026 GMT
        Subject: CN=99c68f978b7afaa717deae6fc47a5996f06d72b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:14:39:4b:6c:cb:54:65:a3:a1:c5:ad:e6:
                    8a:7a:53:2f:0e:72:78:33:1b:4a:31:8c:66:d9:95:
                    b6:4f:0c:f6:57:06:12:dc:62:db:f0:3a:d4:d2:78:
                    c9:a8:7e:7a:95:9c:47:d9:8c:ff:8f:fd:0d:92:70:
                    14:be:bf:28:b0:8b:00:b7:79:83:6e:86:59:58:10:
                    fe:b1:9f:9f:3f:a8:f6:46:c5:f9:0b:f1:14:05:46:
                    c5:44:ce:93:92:09:0e:62:e4:b9:2d:4a:9a:21:74:
                    1a:0b:46:1a:0c:6e:98:c1:f2:85:cb:e2:44:ee:24:
                    1e:2d:8d:53:0b:da:bf:a2:d4:cb:b7:28:8c:68:21:
                    a4:21:36:47:0f:4c:a1:b4:ef:7e:6d:47:7a:f8:66:
                    a4:c1:3f:6b:e6:87:29:70:29:4c:45:f6:a2:39:2a:
                    d2:91:a3:b1:1d:8b:2e:a7:b8:41:fd:30:e0:d4:59:
                    53:cc:5c:bf:b4:9e:4f:df:a9:7a:5c:f4:38:f8:9e:
                    a8:25:31:c8:72:cc:9a:ae:46:b8:5e:43:a3:55:4b:
                    98:7f:60:57:2b:d0:8f:5b:82:be:3b:03:ee:dc:e9:
                    a3:ea:91:86:bd:89:08:a1:9b:62:d4:4e:55:8b:48:
                    27:d3:44:8e:94:4a:3b:e5:b9:0e:eb:14:4a:df:63:
                    7b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C6:8F:97:8B:7A:FA:A7:17:DE:AE:6F:C4:7A:59:96:F0:6D:72:B1
            X509v3 Authority Key Identifier:
                keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ed:0b:54:63:5f:8b:dd:53:46:47:3d:c8:99:ea:69:08:1d:
         9b:4e:56:d0:64:98:8b:35:0b:57:05:a0:98:02:0a:67:8e:ce:
         e1:44:df:13:63:73:7c:68:e6:3c:a0:72:ba:8d:56:c8:ff:5b:
         f0:a7:2b:03:48:20:a1:c2:68:e7:6d:79:d7:79:9c:af:06:21:
         51:56:83:ed:26:6c:b4:46:cf:e2:60:9e:d6:fc:67:51:f0:94:
         e9:e8:89:dc:fb:6e:a2:7f:ca:c0:d4:1f:27:e6:0e:c8:7f:90:
         a3:e5:d5:08:a9:4e:6d:38:6b:83:82:e6:6c:99:04:1e:50:b9:
         ae:81:33:bd:7b:c3:77:31:e3:a9:d6:23:76:29:47:11:1f:cb:
         8c:6e:e4:1d:25:60:7c:63:b0:c8:a2:ac:f3:b4:2a:79:50:88:
         0b:34:40:96:2a:fc:be:c9:52:ec:c2:e0:a8:d2:8d:33:3b:bb:
         0a:f7:5d:59:fa:6d:73:57:81:5b:44:6b:ee:ab:db:fb:ae:b0:
         4b:1b:3d:f3:6a:32:8a:e1:e5:54:8d:86:6c:98:22:cf:26:86:
         52:ff:b2:a4:9c:2f:ca:38:a1:80:d2:af:d4:93:39:c4:50:74:
         c9:d1:96:6a:ff:4d:10:f5:99:c6:5b:03:20:7b:a6:59:6a:a9:
         5e:6f:56:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:23:25 2026 by rpki-client